o Easy to use and maintain
o Low coupling between application code and filtering code. Changes can be easily made without affecting either side.
o Can be implemented almost immediately if the developers know areas that are potentially risky
o Leverage the use of techniques such as encoding, whitelist, blacklist